This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d742c56f-8939-41c6-b93f-9d660f461139.roa
File:                     d742c56f-8939-41c6-b93f-9d660f461139.roa (raw, json)
Hash identifier:          FsdCzOlZqTNPHnuc6wEX6dviRyWPvvwLF58tZ4c9drA=
Subject key identifier:   E8:2A:0F:E8:3B:4A:87:F9:E7:1F:03:88:73:C6:0A:D1:24:25:80:F0
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       1A7382AF252D74229C38117C9458AB7B4DACB0C3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d742c56f-8939-41c6-b93f-9d660f461139.roa
Signing time:             Wed 10 Dec 2025 03:10:39 +0000
ROA not before:           Wed 10 Dec 2025 03:10:39 +0000
ROA not after:            Tue 10 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.174.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:73:82:af:25:2d:74:22:9c:38:11:7c:94:58:ab:7b:4d:ac:b0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Dec 10 03:10:39 2025 GMT
            Not After : Mar 10 23:59:59 2026 GMT
        Subject: serialNumber=ef099ed5628d6d65d1c8f02b2893a66507edc142677aaa6c6eadd825082aa6e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:5b:cc:a0:5e:a4:73:5c:7e:87:79:bb:5d:
                    96:40:cc:56:e5:41:19:9b:50:e8:12:13:29:92:c1:
                    9a:73:6c:81:62:2b:e2:03:93:08:67:c7:15:ad:67:
                    ff:d6:52:9f:c4:0d:d1:f2:aa:e0:cc:74:98:df:48:
                    06:4c:5d:35:00:bf:cd:1d:19:ee:d3:c0:2b:bf:64:
                    30:75:43:7e:0c:77:3e:bb:5a:94:74:ad:3a:75:54:
                    f7:1f:03:e5:03:4a:6e:45:ec:32:05:5a:e7:4b:cc:
                    16:0e:49:a3:d9:18:e7:86:68:59:25:bf:cf:1d:a3:
                    37:dd:c0:86:5d:f9:c7:a9:10:45:32:1c:d7:8f:03:
                    a8:bb:2c:6f:12:dc:91:60:39:59:27:2e:0a:7d:8a:
                    4f:a4:3a:2b:96:12:a7:5c:38:42:af:83:88:33:08:
                    73:90:99:07:69:2a:fd:7d:11:5b:ea:bf:30:70:40:
                    8d:00:3b:90:06:3e:03:a6:97:7a:b2:21:1e:6d:6a:
                    86:55:9d:3a:04:ba:f1:ef:50:de:d1:ae:67:a5:41:
                    85:c4:53:19:23:9b:d6:42:39:32:cd:53:50:bf:27:
                    75:ab:a0:7b:55:97:30:de:ea:1b:90:9a:63:f0:c6:
                    20:fc:9a:8c:87:7e:2f:67:f8:88:ae:74:b7:a9:31:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:0F:E8:3B:4A:87:F9:E7:1F:03:88:73:C6:0A:D1:24:25:80:F0
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d742c56f-8939-41c6-b93f-9d660f461139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.174.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:02:dc:31:ce:ab:d8:b9:b2:c6:6f:55:9f:88:ba:55:28:
         8d:fd:c0:c4:fe:05:f9:f6:b0:2b:5e:0c:68:93:92:ff:cc:64:
         86:bb:13:fa:fe:f9:85:cb:de:df:f7:fd:88:11:99:a9:0c:96:
         e4:3a:04:1b:8d:c6:42:a8:b5:e0:75:e2:41:4b:b7:0d:08:9f:
         0e:d6:48:bb:67:6c:92:e5:60:3d:6d:56:75:e3:3d:dc:ea:ac:
         b5:5c:20:32:f9:bd:8a:92:47:cf:03:fb:26:80:d2:02:26:1d:
         53:0d:30:4e:d0:18:de:ab:a6:21:57:16:a0:ed:6e:f6:4a:ec:
         4b:53:15:b7:4f:db:48:5c:5a:ad:a8:78:1d:32:90:3c:90:c5:
         f4:34:33:7e:75:59:f5:9f:82:b2:fc:b2:d7:bc:da:c1:e3:cb:
         62:87:ed:89:e6:d7:94:83:28:d7:3a:49:42:26:59:e7:5a:00:
         d5:6b:dc:47:4d:1e:6b:dd:58:5f:a8:f9:ab:a3:d9:c4:e6:d5:
         25:da:31:93:1e:d4:5a:78:a3:42:c6:10:87:21:d2:c3:01:37:
         60:a8:f3:d2:d6:c0:ce:ea:9b:f7:0b:96:ea:7e:d8:1c:40:e4:
         e4:33:68:83:87:e7:ca:d3:5e:6c:c0:41:96:24:17:d9:4c:74:
         d7:49:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:48:57 2025 by rpki-client